10918 matches found
Information Disclosure
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...
Denial Of Service (DoS)
The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A memory leak flaw was found in the way the Linux kernel's memory subsystem handled resource clean up in the mmap failure path when the MAPHUGETLB flag was set...
Privilege Escalation
The openstack-keystone packages provide Keystone, a Python implementation of the OpenStack identity service API, which provides Identity, Token, Catalog, and Policy services. The openstack-keystone packages have been upgraded to upstream version 2012.1.3, which provides a number of bug fixes and...
Information Disclosure
Red Hat CloudForms is an on-premise hybrid cloud Infrastructure-as-a-Service IaaS product that lets you create and manage private and public clouds. This update fixes bugs in and adds enhancements to the System Engine packages, and upgrades the system to CloudForms 1.1. This update also fixes the...
2 Million IoT Devices Vulnerable to Complete Takeover
Over 2 million IP security cameras, baby monitors and smart doorbells have serious vulnerabilities that could enable an attacker to hijack the devices and spy on their owners — and there’s currently no known patch for the shared flaws. The attack stems from peer-to-peer P2P communication technolo...
USN-3957-1: MySQL vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04 have been updated to MySQL 5.7.26. In addition to security fixes, the updated packages contain bug fixes,...
OPENSUSE-SU-2019:1291-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication bsc1133528, bsc1130103 This update was imported from the SUSE:SLE-15:Update update project...
SUSE-SU-2018:3064-3 Security update for java-1_8_0-openjdk
This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process
systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another service or user to create a setuid binary that can be used to access its UID beyond the lifetime of the...
SUSE-SU-2019:1038-1 Security update for wireshark
This update for wireshark to version 2.4.14 fixes the following issues: Security issues fixed: - CVE-2019-10895: NetScaler file parser crash. - CVE-2019-10899: SRVLOC dissector crash. - CVE-2019-10894: GSS-API dissector crash. - CVE-2019-10896: DOF dissector crash. - CVE-2019-10901: LDSS dissecto...
SUSE-SU-2019:1037-1 Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: - Fix vfsceph ftruncate and fallocate handling...
CVE-2019-2620 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2592 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2584 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2581 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2585 vulnerabilities
Vulnerabilities for packages: mysql...
BELL-CVE-2019-2708
Bulletin has no description...
Exploit for Missing Authentication for Critical Function in Anviz M3_Firmware
Anviz M3 RFID Access Control security issues Security issues...
FreeBSD : libssh2 -- multiple issues (6e58e1e9-2636-413e-9f84-4c0e21143628)
libssh2 developers report : - Defend against possible integer overflows in compmethodzlibdecomp. - Defend against writing beyond the end of the payload in libssh2transportread. - Sanitize paddinglength - libssh2transportread. - This prevents an underflow resulting in a potential out-of-bounds rea...
openSUSE: Security Advisory for SDL (openSUSE-SU-2019:1223-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...